Joe Sandbox Cloud Basic Analysis Report
Edit tour

Linux Analysis Report
sync.sh4.elf

Overview

General Information

Sample name:sync.sh4.elf
Analysis ID:1642581
MD5:fbf5de76bbdda3ab29a258f18fea9aa0
SHA1:c67f943775354c58ff564cf162ab94db85138186
SHA256:b72d16b620bd3a2afd345207b5b9f22d7383b61b3f57252b35cefec78f0b37d5
Tags:elfuser-abuse_ch
Infos:

Detection

Score:64
Range:0 - 100

Signatures

Multi AV Scanner detection for submitted file
Suricata IDS alerts for network traffic
Performs DNS TXT record lookups
Sample deletes itself
Detected TCP or UDP traffic on non-standard ports
Sample has stripped symbol table
Sleeps for long times indicative of sandbox evasion
Tries to resolve domain names, but no domain seems valid (expired dropper behavior)
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious

General Information

Joe Sandbox version:42.0.0 Malachite
Analysis ID:1642581
Start date and time:2025-03-19 08:12:15 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 28s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:sync.sh4.elf
Detection:MAL
Classification:mal64.evad.linELF@0/0@79/0

Runtime Messages

Command:/tmp/sync.sh4.elf
PID:5454
Exit Code:1
Exit Code Info:
Killed:False
Standard Output:
sync
Standard Error:

Process Tree

  • system is lnxubuntu20
  • sync.sh4.elf (PID: 5454, Parent: 5379, MD5: 8943e5f8f8c280467b4472c15ae93ba9) Arguments: /tmp/sync.sh4.elf
  • cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
2025-03-19T08:13:02.911066+010020135141A Network Trojan was detected192.168.2.13378648.8.8.853UDP

Joe Sandbox Signatures

  • • AV Detection
  • • Networking
  • • System Summary
  • • Hooking and other Techniques for Hiding and Protection
  • • Malware Analysis System Evasion
  • • HIPS / PFW / Operating System Protection Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Source: sync.sh4.elfReversingLabs: Detection: 47%

Networking

barindex
Source: Network trafficSuricata IDS: 2013514 - Severity 1 - ET MALWARE Potential DNS Command and Control via TXT queries : 192.168.2.13:37864 -> 8.8.8.8:53
Source: global trafficTCP traffic: 192.168.2.13:54290 -> 185.194.205.79:61005
Source: unknownDNS traffic detected: query: dnsresolve.socialgains.cf replaycode: Name error (3)
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: global trafficDNS traffic detected: DNS query: dnsresolve.socialgains.cf
Source: ELF static info symbol of initial sample.symtab present: no
Source: classification engineClassification label: mal64.evad.linELF@0/0@79/0

Hooking and other Techniques for Hiding and Protection

barindex
Source: /tmp/sync.sh4.elf (PID: 5454)File: /tmp/sync.sh4.elfJump to behavior
Source: /tmp/sync.sh4.elf (PID: 5458)Sleeps longer then 60s: 60.0sJump to behavior
Source: /tmp/sync.sh4.elf (PID: 5458)Sleeps longer then 60s: 60.0sJump to behavior
Source: /tmp/sync.sh4.elf (PID: 5454)Queries kernel information via 'uname': Jump to behavior
Source: sync.sh4.elf, 5454.1.00007ffc20263000.00007ffc20284000.rw-.sdmpBinary or memory string: sx86_64/usr/bin/qemu-sh4/tmp/sync.sh4.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/sync.sh4.elf
Source: sync.sh4.elf, 5454.1.00007ffc20263000.00007ffc20284000.rw-.sdmpBinary or memory string: /usr/bin/qemu-sh4
Source: sync.sh4.elf, 5454.1.000055fcaa993000.000055fcaa9f6000.rw-.sdmpBinary or memory string: U5!/etc/qemu-binfmt/sh4
Source: sync.sh4.elf, 5454.1.000055fcaa993000.000055fcaa9f6000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/sh4

HIPS / PFW / Operating System Protection Evasion

barindex
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf

Mitre Att&ck Matrix

ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath Interception1
Virtualization/Sandbox Evasion		OS Credential Dumping11
Security Software Discovery		Remote ServicesData from Local System1
Non-Standard Port		Exfiltration Over Other Network MediumAbuse Accessibility Features
CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization Scripts1
File Deletion		LSASS Memory1
Virtualization/Sandbox Evasion		Remote Desktop ProtocolData from Removable Media1
Non-Application Layer Protocol		Exfiltration Over BluetoothNetwork Denial of Service
Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
Application Layer Protocol		Automated ExfiltrationData Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Number of created Files
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1642581 Sample: sync.sh4.elf Startdate: 19/03/2025 Architecture: LINUX Score: 64 15 dnsresolve.socialgains.cf 2->15 17 185.194.205.79, 54290, 54292, 54294 HTSENSEFR France 2->17 19 Suricata IDS alerts for network traffic 2->19 21 Multi AV Scanner detection for submitted file 2->21 8 sync.sh4.elf 2->8         started        signatures3 23 Performs DNS TXT record lookups 15->23 process4 signatures5 25 Sample deletes itself 8->25 11 sync.sh4.elf 8->11         started        process6 process7 13 sync.sh4.elf 11->13         started       

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
sync.sh4.elf47%ReversingLabsLinux.Backdoor.Gafgyt

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

NameIPActiveMaliciousAntivirus DetectionReputation
dnsresolve.socialgains.cf
unknown
unknownfalse
    		high

    World Map of Contacted IPs

    • No. of IPs < 25%
    • 25% < No. of IPs < 50%
    • 50% < No. of IPs < 75%
    • 75% < No. of IPs

    Public IPs

    IPDomainCountryFlagASNASN NameMalicious
    185.194.205.79
    		unknownFrance
    		204145HTSENSEFRfalse

    Joe Sandbox View / Context

    IPs

    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
    185.194.205.79sync.arm7.elfGet hashmaliciousUnknownBrowse
      sync.arm5.elfGet hashmaliciousUnknownBrowse
        sync.arm4.elfGet hashmaliciousUnknownBrowse
          sync.x86_64.elfGet hashmaliciousUnknownBrowse
            sync.sh4.elfGet hashmaliciousUnknownBrowse
              sync.superh.elfGet hashmaliciousUnknownBrowse
                sync.x86.elfGet hashmaliciousUnknownBrowse
                  sync.superh.elfGet hashmaliciousUnknownBrowse
                    sync.mipsel.elfGet hashmaliciousUnknownBrowse
                      sync.arm5.elfGet hashmaliciousUnknownBrowse

                        Domains

                        ⊘No context

                        ASNs

                        MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                        HTSENSEFRsync.arm7.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.arm5.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.arm4.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.x86_64.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.sh4.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.superh.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.x86.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.superh.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.mipsel.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.arm5.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79

                        JA3 Fingerprints

                        ⊘No context

                        Dropped Files

                        ⊘No context

                        Created / dropped Files

                        ⊘No created / dropped files found

                        Static File Info

                        General

                        File type:ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, stripped
                        Entropy (8bit):6.943529999532675
                        TrID:
                        • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                        File name:sync.sh4.elf
                        File size:52'700 bytes
                        MD5:fbf5de76bbdda3ab29a258f18fea9aa0
                        SHA1:c67f943775354c58ff564cf162ab94db85138186
                        SHA256:b72d16b620bd3a2afd345207b5b9f22d7383b61b3f57252b35cefec78f0b37d5
                        SHA512:c80a0b5480579dc6187f0d0cf454cad9b2d6d4bc61233642bc1f4fcf44ffdf6a1d0243cbc14375aad60fb5cf10b07af59642999f91c27396145833bb01381171
                        SSDEEP:1536:jC/PlIxIgKDgSrHguDg1IR988r0BKM6sWGvZOCioSX2:GlIxIgKDgSrHguDg1IRz0IM5vZOjX2
                        TLSH:F5338DA38C245E88C468E4F274709BBFE753E90495975FCA2662C66AD487ECCF0463F4
                        File Content Preview:.ELF..............*.......@.4...L.......4. ...(...............@...@...........................A...A.................Q.td............................././"O.n........#.*@........#.*@L....o&O.n...l..............................././.../.a"O.!...n...a.b("...q.

                        Static ELF Info

                        ELF header

                        Class:ELF32
                        Data:2's complement, little endian
                        Version:1 (current)
                        Machine:<unknown>
                        Version Number:0x1
                        Type:EXEC (Executable file)
                        OS/ABI:UNIX - System V
                        ABI Version:0
                        Entry Point Address:0x4001a0
                        Flags:0x9
                        ELF Header Size:52
                        Program Header Offset:52
                        Program Header Size:32
                        Number of Program Headers:3
                        Section Header Offset:52300
                        Section Header Size:40
                        Number of Section Headers:10
                        Header String Table Index:9

                        Sections

                        NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                        NULL0x00x00x00x00x0000
                        .initPROGBITS0x4000940x940x300x00x6AX004
                        .textPROGBITS0x4000e00xe00xac600x00x6AX0032
                        .finiPROGBITS0x40ad400xad400x240x00x6AX004
                        .rodataPROGBITS0x40ad640xad640x1ab00x00x2A004
                        .ctorsPROGBITS0x41c8180xc8180x80x00x3WA004
                        .dtorsPROGBITS0x41c8200xc8200x80x00x3WA004
                        .dataPROGBITS0x41c82c0xc82c0x3e00x00x3WA004
                        .bssNOBITS0x41cc0c0xcc0c0xa2fc0x00x3WA004
                        .shstrtabSTRTAB0x00xcc0c0x3e0x00x0001

                        Program Segments

                        TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                        LOAD0x00x4000000x4000000xc8140xc8146.99970x5R E0x10000.init .text .fini .rodata
                        LOAD0xc8180x41c8180x41c8180x3f40xa6f03.58880x6RW 0x10000.ctors .dtors .data .bss
                        GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

                        Network Behavior

                        Download Network PCAP: filtered – full

                        Suricata IDS Alerts

                        TimestampSIDSignatureSeveritySource IPSource PortDest IPDest PortProtocol
                        2025-03-19T08:13:02.911066+01002013514ET MALWARE Potential DNS Command and Control via TXT queries1192.168.2.13378648.8.8.853UDP

                        Network Port Distribution

                        • Total Packets: 143
                        • • 61005 undefined
                        • • 53 (DNS)
                        TimestampSource PortDest PortSource IPDest IP
                        Mar 19, 2025 08:13:04.959491014 CET5429061005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:04.964180946 CET6100554290185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:04.964242935 CET5429061005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:04.964371920 CET5429061005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:04.968998909 CET6100554290185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:06.761059999 CET6100554290185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:06.761384964 CET5429061005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:06.766168118 CET6100554290185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:13.107495070 CET5429261005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:13.112596035 CET6100554292185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:13.112700939 CET5429261005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:13.112762928 CET5429261005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:13.117383957 CET6100554292185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:14.880850077 CET6100554292185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:14.881133080 CET5429261005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:14.885868073 CET6100554292185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:21.116856098 CET5429461005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:21.126957893 CET6100554294185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:21.127106905 CET5429461005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:21.127106905 CET5429461005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:21.133207083 CET6100554294185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:22.912947893 CET6100554294185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:22.913769960 CET5429461005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:22.918438911 CET6100554294185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:29.227252960 CET5429661005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:29.232009888 CET6100554296185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:29.232187986 CET5429661005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:29.232330084 CET5429661005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:29.236932039 CET6100554296185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:29.237399101 CET5429661005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:29.242055893 CET6100554296185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:30.991668940 CET6100554296185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:30.991935968 CET5429661005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:30.996670008 CET6100554296185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:37.287297010 CET5429861005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:37.292149067 CET6100554298185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:37.292247057 CET5429861005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:37.292311907 CET5429861005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:37.297029972 CET6100554298185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:39.084542036 CET6100554298185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:39.084832907 CET5429861005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:39.089557886 CET6100554298185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:45.441284895 CET5430061005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:45.446247101 CET6100554300185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:45.446311951 CET5430061005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:45.446372032 CET5430061005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:45.450990915 CET6100554300185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:47.225796938 CET6100554300185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:47.226355076 CET5430061005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:47.231686115 CET6100554300185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:53.677352905 CET5430261005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:53.682125092 CET6100554302185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:53.682188034 CET5430261005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:53.682218075 CET5430261005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:53.686780930 CET6100554302185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:55.475308895 CET6100554302185.194.205.79192.168.2.13
                        Mar 19, 2025 08:13:55.475716114 CET5430261005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:13:55.480381012 CET6100554302185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:01.710467100 CET5430461005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:01.715301037 CET6100554304185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:01.715389013 CET5430461005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:01.715431929 CET5430461005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:01.720087051 CET6100554304185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:01.720170021 CET5430461005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:01.724877119 CET6100554304185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:03.510500908 CET6100554304185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:03.510725021 CET5430461005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:03.515490055 CET6100554304185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:09.888501883 CET5430661005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:09.893606901 CET6100554306185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:09.893695116 CET5430661005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:09.893718004 CET5430661005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:09.898590088 CET6100554306185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:11.682374954 CET6100554306185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:11.682765007 CET5430661005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:11.682810068 CET5430661005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:11.687459946 CET6100554306185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:18.176219940 CET5430861005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:18.181390047 CET6100554308185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:18.181499958 CET5430861005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:18.181536913 CET5430861005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:18.186546087 CET6100554308185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:19.975693941 CET6100554308185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:19.976077080 CET5430861005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:19.980906010 CET6100554308185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:26.272613049 CET5431061005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:26.278036118 CET6100554310185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:26.278110027 CET5431061005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:26.278152943 CET5431061005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:26.282766104 CET6100554310185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:28.089482069 CET6100554310185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:28.089899063 CET5431061005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:28.095000982 CET6100554310185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:34.301642895 CET5431261005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:34.306704044 CET6100554312185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:34.306783915 CET5431261005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:34.306858063 CET5431261005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:34.311796904 CET6100554312185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:34.311871052 CET5431261005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:34.317089081 CET6100554312185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:36.120767117 CET6100554312185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:36.121112108 CET5431261005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:36.125940084 CET6100554312185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:42.523092031 CET5431461005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:42.527925968 CET6100554314185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:42.528057098 CET5431461005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:42.528107882 CET5431461005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:42.532815933 CET6100554314185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:44.306051016 CET6100554314185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:44.306443930 CET5431461005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:44.311259985 CET6100554314185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:50.525469065 CET5431661005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:50.530467987 CET6100554316185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:50.530565977 CET5431661005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:50.530611038 CET5431661005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:50.535283089 CET6100554316185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:52.325325012 CET6100554316185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:52.325742006 CET5431661005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:52.330400944 CET6100554316185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:58.685266018 CET5431861005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:58.690217018 CET6100554318185.194.205.79192.168.2.13
                        Mar 19, 2025 08:14:58.690321922 CET5431861005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:58.690392017 CET5431861005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:14:58.695066929 CET6100554318185.194.205.79192.168.2.13
                        Mar 19, 2025 08:15:00.446254015 CET6100554318185.194.205.79192.168.2.13
                        Mar 19, 2025 08:15:00.446594000 CET5431861005192.168.2.13185.194.205.79
                        Mar 19, 2025 08:15:00.451457024 CET6100554318185.194.205.79192.168.2.13
                        TimestampSource PortDest PortSource IPDest IP
                        Mar 19, 2025 08:12:59.565572977 CET3684953192.168.2.131.0.0.1
                        Mar 19, 2025 08:12:59.691349030 CET53368491.0.0.1192.168.2.13
                        Mar 19, 2025 08:13:00.696464062 CET5216853192.168.2.131.0.0.1
                        Mar 19, 2025 08:13:00.799952984 CET53521681.0.0.1192.168.2.13
                        Mar 19, 2025 08:13:01.802294970 CET4190853192.168.2.131.1.1.1
                        Mar 19, 2025 08:13:01.908298016 CET53419081.1.1.1192.168.2.13
                        Mar 19, 2025 08:13:02.911066055 CET3786453192.168.2.138.8.8.8
                        Mar 19, 2025 08:13:02.939963102 CET53378648.8.8.8192.168.2.13
                        Mar 19, 2025 08:13:03.943579912 CET5686053192.168.2.138.8.4.4
                        Mar 19, 2025 08:13:03.958144903 CET53568608.8.4.4192.168.2.13
                        Mar 19, 2025 08:13:07.763716936 CET5068453192.168.2.138.8.8.8
                        Mar 19, 2025 08:13:07.791811943 CET53506848.8.8.8192.168.2.13
                        Mar 19, 2025 08:13:08.794533014 CET5094053192.168.2.138.8.4.4
                        Mar 19, 2025 08:13:08.809880972 CET53509408.8.4.4192.168.2.13
                        Mar 19, 2025 08:13:09.812745094 CET4608453192.168.2.131.0.0.1
                        Mar 19, 2025 08:13:09.950088024 CET53460841.0.0.1192.168.2.13
                        Mar 19, 2025 08:13:10.953274965 CET4916053192.168.2.138.8.8.8
                        Mar 19, 2025 08:13:10.982422113 CET53491608.8.8.8192.168.2.13
                        Mar 19, 2025 08:13:11.984942913 CET5939353192.168.2.131.0.0.1
                        Mar 19, 2025 08:13:12.104773045 CET53593931.0.0.1192.168.2.13
                        Mar 19, 2025 08:13:15.884246111 CET4229653192.168.2.131.0.0.1
                        Mar 19, 2025 08:13:16.021313906 CET53422961.0.0.1192.168.2.13
                        Mar 19, 2025 08:13:17.025919914 CET5732453192.168.2.138.8.4.4
                        Mar 19, 2025 08:13:17.040540934 CET53573248.8.4.4192.168.2.13
                        Mar 19, 2025 08:13:18.044178963 CET4570753192.168.2.138.8.4.4
                        Mar 19, 2025 08:13:18.059520960 CET53457078.8.4.4192.168.2.13
                        Mar 19, 2025 08:13:19.062284946 CET4653553192.168.2.131.1.1.1
                        Mar 19, 2025 08:13:19.086890936 CET53465351.1.1.1192.168.2.13
                        Mar 19, 2025 08:13:20.089142084 CET4386853192.168.2.131.0.0.1
                        Mar 19, 2025 08:13:20.114676952 CET53438681.0.0.1192.168.2.13
                        Mar 19, 2025 08:13:23.917160988 CET4145353192.168.2.138.8.8.8
                        Mar 19, 2025 08:13:23.932749033 CET53414538.8.8.8192.168.2.13
                        Mar 19, 2025 08:13:24.934963942 CET6090353192.168.2.131.0.0.1
                        Mar 19, 2025 08:13:25.038100004 CET53609031.0.0.1192.168.2.13
                        Mar 19, 2025 08:13:26.045263052 CET5011253192.168.2.131.0.0.1
                        Mar 19, 2025 08:13:26.176420927 CET53501121.0.0.1192.168.2.13
                        Mar 19, 2025 08:13:27.178108931 CET5402853192.168.2.131.1.1.1
                        Mar 19, 2025 08:13:27.207395077 CET53540281.1.1.1192.168.2.13
                        Mar 19, 2025 08:13:28.209743977 CET3425453192.168.2.138.8.8.8
                        Mar 19, 2025 08:13:28.225410938 CET53342548.8.8.8192.168.2.13
                        Mar 19, 2025 08:13:31.994940996 CET5224753192.168.2.138.8.8.8
                        Mar 19, 2025 08:13:32.009998083 CET53522478.8.8.8192.168.2.13
                        Mar 19, 2025 08:13:33.012834072 CET5875453192.168.2.131.0.0.1
                        Mar 19, 2025 08:13:33.037614107 CET53587541.0.0.1192.168.2.13
                        Mar 19, 2025 08:13:34.044264078 CET3532953192.168.2.131.1.1.1
                        Mar 19, 2025 08:13:34.148235083 CET53353291.1.1.1192.168.2.13
                        Mar 19, 2025 08:13:35.150824070 CET5112053192.168.2.131.1.1.1
                        Mar 19, 2025 08:13:35.257592916 CET53511201.1.1.1192.168.2.13
                        Mar 19, 2025 08:13:36.261187077 CET4618853192.168.2.131.0.0.1
                        Mar 19, 2025 08:13:36.285181046 CET53461881.0.0.1192.168.2.13
                        Mar 19, 2025 08:13:40.088010073 CET5810453192.168.2.131.1.1.1
                        Mar 19, 2025 08:13:40.113212109 CET53581041.1.1.1192.168.2.13
                        Mar 19, 2025 08:13:41.115787983 CET5291953192.168.2.131.0.0.1
                        Mar 19, 2025 08:13:41.254081964 CET53529191.0.0.1192.168.2.13
                        Mar 19, 2025 08:13:42.260091066 CET4929753192.168.2.131.0.0.1
                        Mar 19, 2025 08:13:42.372953892 CET53492971.0.0.1192.168.2.13
                        Mar 19, 2025 08:13:43.378489971 CET3654253192.168.2.131.0.0.1
                        Mar 19, 2025 08:13:43.405375957 CET53365421.0.0.1192.168.2.13
                        Mar 19, 2025 08:13:44.408350945 CET5525453192.168.2.138.8.8.8
                        Mar 19, 2025 08:13:44.437072992 CET53552548.8.8.8192.168.2.13
                        Mar 19, 2025 08:13:48.234586954 CET4990253192.168.2.138.8.4.4
                        Mar 19, 2025 08:13:48.249464989 CET53499028.8.4.4192.168.2.13
                        Mar 19, 2025 08:13:49.256123066 CET3854053192.168.2.131.1.1.1
                        Mar 19, 2025 08:13:49.376250982 CET53385401.1.1.1192.168.2.13
                        Mar 19, 2025 08:13:50.379019022 CET5840253192.168.2.131.1.1.1
                        Mar 19, 2025 08:13:50.500020981 CET53584021.1.1.1192.168.2.13
                        Mar 19, 2025 08:13:51.502773046 CET5755953192.168.2.131.1.1.1
                        Mar 19, 2025 08:13:51.640295982 CET53575591.1.1.1192.168.2.13
                        Mar 19, 2025 08:13:52.648475885 CET3394853192.168.2.131.1.1.1
                        Mar 19, 2025 08:13:52.673295021 CET53339481.1.1.1192.168.2.13
                        Mar 19, 2025 08:13:56.484586954 CET3944753192.168.2.131.1.1.1
                        Mar 19, 2025 08:13:56.603789091 CET53394471.1.1.1192.168.2.13
                        Mar 19, 2025 08:13:57.610064983 CET4140053192.168.2.138.8.4.4
                        Mar 19, 2025 08:13:57.625591993 CET53414008.8.4.4192.168.2.13
                        Mar 19, 2025 08:13:58.631211996 CET3700353192.168.2.131.0.0.1
                        Mar 19, 2025 08:13:58.655788898 CET53370031.0.0.1192.168.2.13
                        Mar 19, 2025 08:13:59.660214901 CET4198253192.168.2.138.8.8.8
                        Mar 19, 2025 08:13:59.675419092 CET53419828.8.8.8192.168.2.13
                        Mar 19, 2025 08:14:00.678620100 CET4502853192.168.2.138.8.8.8
                        Mar 19, 2025 08:14:00.708676100 CET53450288.8.8.8192.168.2.13
                        Mar 19, 2025 08:14:04.513503075 CET5415153192.168.2.138.8.8.8
                        Mar 19, 2025 08:14:04.529201984 CET53541518.8.8.8192.168.2.13
                        Mar 19, 2025 08:14:05.532015085 CET3557853192.168.2.131.1.1.1
                        Mar 19, 2025 08:14:05.650021076 CET53355781.1.1.1192.168.2.13
                        Mar 19, 2025 08:14:06.653844118 CET3766353192.168.2.131.0.0.1
                        Mar 19, 2025 08:14:06.758383989 CET53376631.0.0.1192.168.2.13
                        Mar 19, 2025 08:14:07.761332035 CET4512353192.168.2.131.0.0.1
                        Mar 19, 2025 08:14:07.867595911 CET53451231.0.0.1192.168.2.13
                        Mar 19, 2025 08:14:08.870289087 CET3449853192.168.2.138.8.8.8
                        Mar 19, 2025 08:14:08.886311054 CET53344988.8.8.8192.168.2.13
                        Mar 19, 2025 08:14:12.685605049 CET4015453192.168.2.138.8.4.4
                        Mar 19, 2025 08:14:12.701489925 CET53401548.8.4.4192.168.2.13
                        Mar 19, 2025 08:14:13.704581022 CET4528153192.168.2.138.8.4.4
                        Mar 19, 2025 08:14:14.010324955 CET53452818.8.4.4192.168.2.13
                        Mar 19, 2025 08:14:15.012898922 CET6033553192.168.2.138.8.4.4
                        Mar 19, 2025 08:14:15.030472994 CET53603358.8.4.4192.168.2.13
                        Mar 19, 2025 08:14:16.033520937 CET4536053192.168.2.131.0.0.1
                        Mar 19, 2025 08:14:16.155144930 CET53453601.0.0.1192.168.2.13
                        Mar 19, 2025 08:14:17.158145905 CET5802953192.168.2.138.8.4.4
                        Mar 19, 2025 08:14:17.173934937 CET53580298.8.4.4192.168.2.13
                        Mar 19, 2025 08:14:20.979059935 CET3522853192.168.2.131.1.1.1
                        Mar 19, 2025 08:14:21.086299896 CET53352281.1.1.1192.168.2.13
                        Mar 19, 2025 08:14:22.089837074 CET4215253192.168.2.131.0.0.1
                        Mar 19, 2025 08:14:22.215725899 CET53421521.0.0.1192.168.2.13
                        Mar 19, 2025 08:14:23.218945026 CET5269453192.168.2.138.8.8.8
                        Mar 19, 2025 08:14:23.234486103 CET53526948.8.8.8192.168.2.13
                        Mar 19, 2025 08:14:24.237298965 CET5766553192.168.2.138.8.8.8
                        Mar 19, 2025 08:14:24.253166914 CET53576658.8.8.8192.168.2.13
                        Mar 19, 2025 08:14:25.255737066 CET3385253192.168.2.138.8.8.8
                        Mar 19, 2025 08:14:25.270801067 CET53338528.8.8.8192.168.2.13
                        Mar 19, 2025 08:14:29.092988014 CET5637453192.168.2.131.1.1.1
                        Mar 19, 2025 08:14:29.203097105 CET53563741.1.1.1192.168.2.13
                        Mar 19, 2025 08:14:30.206798077 CET3939053192.168.2.138.8.4.4
                        Mar 19, 2025 08:14:30.223016977 CET53393908.8.4.4192.168.2.13
                        Mar 19, 2025 08:14:31.226361036 CET3982553192.168.2.131.0.0.1
                        Mar 19, 2025 08:14:31.250957966 CET53398251.0.0.1192.168.2.13
                        Mar 19, 2025 08:14:32.254522085 CET6073853192.168.2.131.1.1.1
                        Mar 19, 2025 08:14:32.279038906 CET53607381.1.1.1192.168.2.13
                        Mar 19, 2025 08:14:33.282836914 CET5294753192.168.2.138.8.4.4
                        Mar 19, 2025 08:14:33.298734903 CET53529478.8.4.4192.168.2.13
                        Mar 19, 2025 08:14:37.124360085 CET3511553192.168.2.131.0.0.1
                        Mar 19, 2025 08:14:37.233899117 CET53351151.0.0.1192.168.2.13
                        Mar 19, 2025 08:14:38.237019062 CET4699253192.168.2.131.0.0.1
                        Mar 19, 2025 08:14:38.341337919 CET53469921.0.0.1192.168.2.13
                        Mar 19, 2025 08:14:39.345221043 CET5121853192.168.2.138.8.4.4
                        Mar 19, 2025 08:14:39.360688925 CET53512188.8.4.4192.168.2.13
                        Mar 19, 2025 08:14:40.363055944 CET3583053192.168.2.131.1.1.1
                        Mar 19, 2025 08:14:40.387996912 CET53358301.1.1.1192.168.2.13
                        Mar 19, 2025 08:14:41.391789913 CET3445353192.168.2.131.0.0.1
                        Mar 19, 2025 08:14:41.520656109 CET53344531.0.0.1192.168.2.13
                        Mar 19, 2025 08:14:45.308403969 CET3837253192.168.2.131.0.0.1
                        Mar 19, 2025 08:14:45.418365955 CET53383721.0.0.1192.168.2.13
                        Mar 19, 2025 08:14:46.420993090 CET5075553192.168.2.138.8.4.4
                        Mar 19, 2025 08:14:46.449532986 CET53507558.8.4.4192.168.2.13
                        Mar 19, 2025 08:14:47.452436924 CET5281553192.168.2.138.8.8.8
                        Mar 19, 2025 08:14:47.466994047 CET53528158.8.8.8192.168.2.13
                        Mar 19, 2025 08:14:48.469851971 CET6004353192.168.2.138.8.4.4
                        Mar 19, 2025 08:14:48.485526085 CET53600438.8.4.4192.168.2.13
                        Mar 19, 2025 08:14:49.487512112 CET4895953192.168.2.138.8.4.4
                        Mar 19, 2025 08:14:49.522969007 CET53489598.8.4.4192.168.2.13
                        Mar 19, 2025 08:14:53.329108953 CET5615153192.168.2.131.0.0.1
                        Mar 19, 2025 08:14:53.354275942 CET53561511.0.0.1192.168.2.13
                        Mar 19, 2025 08:14:54.356769085 CET5311053192.168.2.138.8.4.4
                        Mar 19, 2025 08:14:54.384999037 CET53531108.8.4.4192.168.2.13
                        Mar 19, 2025 08:14:55.386945009 CET3993653192.168.2.131.1.1.1
                        Mar 19, 2025 08:14:55.524693966 CET53399361.1.1.1192.168.2.13
                        Mar 19, 2025 08:14:56.528367996 CET4329353192.168.2.131.1.1.1
                        Mar 19, 2025 08:14:56.647248983 CET53432931.1.1.1192.168.2.13
                        Mar 19, 2025 08:14:57.652014971 CET4542953192.168.2.138.8.4.4
                        Mar 19, 2025 08:14:57.681489944 CET53454298.8.4.4192.168.2.13
                        Mar 19, 2025 08:15:01.449475050 CET5416453192.168.2.138.8.4.4
                        Mar 19, 2025 08:15:01.465032101 CET53541648.8.4.4192.168.2.13
                        Mar 19, 2025 08:15:02.467688084 CET4204653192.168.2.131.0.0.1
                        Mar 19, 2025 08:15:02.599679947 CET53420461.0.0.1192.168.2.13
                        Mar 19, 2025 08:15:03.603359938 CET4965353192.168.2.138.8.4.4
                        Mar 19, 2025 08:15:03.619245052 CET53496538.8.4.4192.168.2.13
                        Mar 19, 2025 08:15:04.622953892 CET5765353192.168.2.131.0.0.1
                        Mar 19, 2025 08:15:04.649462938 CET53576531.0.0.1192.168.2.13

                        DNS Queries

                        TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                        Mar 19, 2025 08:12:59.565572977 CET192.168.2.131.0.0.10x4313Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:00.696464062 CET192.168.2.131.0.0.10x4313Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:01.802294970 CET192.168.2.131.1.1.10x4313Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:02.911066055 CET192.168.2.138.8.8.80x4313Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:03.943579912 CET192.168.2.138.8.4.40x4313Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:07.763716936 CET192.168.2.138.8.8.80xf022Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:08.794533014 CET192.168.2.138.8.4.40xf022Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:09.812745094 CET192.168.2.131.0.0.10xf022Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:10.953274965 CET192.168.2.138.8.8.80xf022Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:11.984942913 CET192.168.2.131.0.0.10xf022Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:15.884246111 CET192.168.2.131.0.0.10x810eStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:17.025919914 CET192.168.2.138.8.4.40x810eStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:18.044178963 CET192.168.2.138.8.4.40x810eStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:19.062284946 CET192.168.2.131.1.1.10x810eStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:20.089142084 CET192.168.2.131.0.0.10x810eStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:23.917160988 CET192.168.2.138.8.8.80xd46aStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:24.934963942 CET192.168.2.131.0.0.10xd46aStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:26.045263052 CET192.168.2.131.0.0.10xd46aStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:27.178108931 CET192.168.2.131.1.1.10xd46aStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:28.209743977 CET192.168.2.138.8.8.80xd46aStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:31.994940996 CET192.168.2.138.8.8.80x3f04Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:33.012834072 CET192.168.2.131.0.0.10x3f04Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:34.044264078 CET192.168.2.131.1.1.10x3f04Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:35.150824070 CET192.168.2.131.1.1.10x3f04Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:36.261187077 CET192.168.2.131.0.0.10x3f04Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:40.088010073 CET192.168.2.131.1.1.10x3751Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:41.115787983 CET192.168.2.131.0.0.10x3751Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:42.260091066 CET192.168.2.131.0.0.10x3751Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:43.378489971 CET192.168.2.131.0.0.10x3751Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:44.408350945 CET192.168.2.138.8.8.80x3751Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:48.234586954 CET192.168.2.138.8.4.40x75d4Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:49.256123066 CET192.168.2.131.1.1.10x75d4Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:50.379019022 CET192.168.2.131.1.1.10x75d4Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:51.502773046 CET192.168.2.131.1.1.10x75d4Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:52.648475885 CET192.168.2.131.1.1.10x75d4Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:56.484586954 CET192.168.2.131.1.1.10xa910Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:57.610064983 CET192.168.2.138.8.4.40xa910Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:58.631211996 CET192.168.2.131.0.0.10xa910Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:59.660214901 CET192.168.2.138.8.8.80xa910Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:00.678620100 CET192.168.2.138.8.8.80xa910Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:04.513503075 CET192.168.2.138.8.8.80x4cffStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:05.532015085 CET192.168.2.131.1.1.10x4cffStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:06.653844118 CET192.168.2.131.0.0.10x4cffStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:07.761332035 CET192.168.2.131.0.0.10x4cffStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:08.870289087 CET192.168.2.138.8.8.80x4cffStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:12.685605049 CET192.168.2.138.8.4.40x895Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:13.704581022 CET192.168.2.138.8.4.40x895Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:15.012898922 CET192.168.2.138.8.4.40x895Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:16.033520937 CET192.168.2.131.0.0.10x895Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:17.158145905 CET192.168.2.138.8.4.40x895Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:20.979059935 CET192.168.2.131.1.1.10x1241Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:22.089837074 CET192.168.2.131.0.0.10x1241Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:23.218945026 CET192.168.2.138.8.8.80x1241Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:24.237298965 CET192.168.2.138.8.8.80x1241Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:25.255737066 CET192.168.2.138.8.8.80x1241Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:29.092988014 CET192.168.2.131.1.1.10xdb5Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:30.206798077 CET192.168.2.138.8.4.40xdb5Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:31.226361036 CET192.168.2.131.0.0.10xdb5Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:32.254522085 CET192.168.2.131.1.1.10xdb5Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:33.282836914 CET192.168.2.138.8.4.40xdb5Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:37.124360085 CET192.168.2.131.0.0.10x28d6Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:38.237019062 CET192.168.2.131.0.0.10x28d6Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:39.345221043 CET192.168.2.138.8.4.40x28d6Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:40.363055944 CET192.168.2.131.1.1.10x28d6Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:41.391789913 CET192.168.2.131.0.0.10x28d6Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:45.308403969 CET192.168.2.131.0.0.10x48f6Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:46.420993090 CET192.168.2.138.8.4.40x48f6Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:47.452436924 CET192.168.2.138.8.8.80x48f6Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:48.469851971 CET192.168.2.138.8.4.40x48f6Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:49.487512112 CET192.168.2.138.8.4.40x48f6Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:53.329108953 CET192.168.2.131.0.0.10xb8faStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:54.356769085 CET192.168.2.138.8.4.40xb8faStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:55.386945009 CET192.168.2.131.1.1.10xb8faStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:56.528367996 CET192.168.2.131.1.1.10xb8faStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:57.652014971 CET192.168.2.138.8.4.40xb8faStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:15:01.449475050 CET192.168.2.138.8.4.40x1c19Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:15:02.467688084 CET192.168.2.131.0.0.10x1c19Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:15:03.603359938 CET192.168.2.138.8.4.40x1c19Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:15:04.622953892 CET192.168.2.131.0.0.10x1c19Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false

                        DNS Answers

                        TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                        Mar 19, 2025 08:12:59.691349030 CET1.0.0.1192.168.2.130x4313Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:00.799952984 CET1.0.0.1192.168.2.130x4313Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:01.908298016 CET1.1.1.1192.168.2.130x4313Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:02.939963102 CET8.8.8.8192.168.2.130x4313Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:03.958144903 CET8.8.4.4192.168.2.130x4313Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:07.791811943 CET8.8.8.8192.168.2.130xf022Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:08.809880972 CET8.8.4.4192.168.2.130xf022Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:09.950088024 CET1.0.0.1192.168.2.130xf022Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:10.982422113 CET8.8.8.8192.168.2.130xf022Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:12.104773045 CET1.0.0.1192.168.2.130xf022Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:16.021313906 CET1.0.0.1192.168.2.130x810eName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:17.040540934 CET8.8.4.4192.168.2.130x810eName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:18.059520960 CET8.8.4.4192.168.2.130x810eName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:19.086890936 CET1.1.1.1192.168.2.130x810eName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:20.114676952 CET1.0.0.1192.168.2.130x810eName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:23.932749033 CET8.8.8.8192.168.2.130xd46aName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:25.038100004 CET1.0.0.1192.168.2.130xd46aName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:26.176420927 CET1.0.0.1192.168.2.130xd46aName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:27.207395077 CET1.1.1.1192.168.2.130xd46aName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:28.225410938 CET8.8.8.8192.168.2.130xd46aName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:32.009998083 CET8.8.8.8192.168.2.130x3f04Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:33.037614107 CET1.0.0.1192.168.2.130x3f04Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:34.148235083 CET1.1.1.1192.168.2.130x3f04Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:35.257592916 CET1.1.1.1192.168.2.130x3f04Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:36.285181046 CET1.0.0.1192.168.2.130x3f04Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:40.113212109 CET1.1.1.1192.168.2.130x3751Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:41.254081964 CET1.0.0.1192.168.2.130x3751Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:42.372953892 CET1.0.0.1192.168.2.130x3751Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:43.405375957 CET1.0.0.1192.168.2.130x3751Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:44.437072992 CET8.8.8.8192.168.2.130x3751Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:48.249464989 CET8.8.4.4192.168.2.130x75d4Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:49.376250982 CET1.1.1.1192.168.2.130x75d4Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:50.500020981 CET1.1.1.1192.168.2.130x75d4Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:51.640295982 CET1.1.1.1192.168.2.130x75d4Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:52.673295021 CET1.1.1.1192.168.2.130x75d4Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:56.603789091 CET1.1.1.1192.168.2.130xa910Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:57.625591993 CET8.8.4.4192.168.2.130xa910Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:58.655788898 CET1.0.0.1192.168.2.130xa910Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:59.675419092 CET8.8.8.8192.168.2.130xa910Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:00.708676100 CET8.8.8.8192.168.2.130xa910Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:04.529201984 CET8.8.8.8192.168.2.130x4cffName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:05.650021076 CET1.1.1.1192.168.2.130x4cffName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:06.758383989 CET1.0.0.1192.168.2.130x4cffName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:07.867595911 CET1.0.0.1192.168.2.130x4cffName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:08.886311054 CET8.8.8.8192.168.2.130x4cffName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:12.701489925 CET8.8.4.4192.168.2.130x895Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:14.010324955 CET8.8.4.4192.168.2.130x895Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:15.030472994 CET8.8.4.4192.168.2.130x895Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:16.155144930 CET1.0.0.1192.168.2.130x895Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:17.173934937 CET8.8.4.4192.168.2.130x895Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:21.086299896 CET1.1.1.1192.168.2.130x1241Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:22.215725899 CET1.0.0.1192.168.2.130x1241Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:23.234486103 CET8.8.8.8192.168.2.130x1241Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:24.253166914 CET8.8.8.8192.168.2.130x1241Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:25.270801067 CET8.8.8.8192.168.2.130x1241Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:29.203097105 CET1.1.1.1192.168.2.130xdb5Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:30.223016977 CET8.8.4.4192.168.2.130xdb5Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:31.250957966 CET1.0.0.1192.168.2.130xdb5Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:32.279038906 CET1.1.1.1192.168.2.130xdb5Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:33.298734903 CET8.8.4.4192.168.2.130xdb5Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:37.233899117 CET1.0.0.1192.168.2.130x28d6Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:38.341337919 CET1.0.0.1192.168.2.130x28d6Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:39.360688925 CET8.8.4.4192.168.2.130x28d6Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:40.387996912 CET1.1.1.1192.168.2.130x28d6Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:41.520656109 CET1.0.0.1192.168.2.130x28d6Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:45.418365955 CET1.0.0.1192.168.2.130x48f6Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:46.449532986 CET8.8.4.4192.168.2.130x48f6Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:47.466994047 CET8.8.8.8192.168.2.130x48f6Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:48.485526085 CET8.8.4.4192.168.2.130x48f6Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:49.522969007 CET8.8.4.4192.168.2.130x48f6Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:53.354275942 CET1.0.0.1192.168.2.130xb8faName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:54.384999037 CET8.8.4.4192.168.2.130xb8faName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:55.524693966 CET1.1.1.1192.168.2.130xb8faName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:56.647248983 CET1.1.1.1192.168.2.130xb8faName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:57.681489944 CET8.8.4.4192.168.2.130xb8faName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:15:01.465032101 CET8.8.4.4192.168.2.130x1c19Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:15:02.599679947 CET1.0.0.1192.168.2.130x1c19Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:15:03.619245052 CET8.8.4.4192.168.2.130x1c19Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:15:04.649462938 CET1.0.0.1192.168.2.130x1c19Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false

                        System Behavior

                        General

                        Start time (UTC):07:12:58
                        Start date (UTC):19/03/2025
                        Path:/tmp/sync.sh4.elf
                        Arguments:/tmp/sync.sh4.elf
                        File size:4139976 bytes
                        MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

                        File Activities

                        Process Activities

                        System Activities

                        Network Activities


                        General

                        Start time (UTC):07:12:59
                        Start date (UTC):19/03/2025
                        Path:/tmp/sync.sh4.elf
                        Arguments:-
                        File size:4139976 bytes
                        MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

                        Process Activities

                        Network Activities


                        General

                        Start time (UTC):07:12:59
                        Start date (UTC):19/03/2025
                        Path:/tmp/sync.sh4.elf
                        Arguments:-
                        File size:4139976 bytes
                        MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

                        Process Activities